According to a report from foreign media on November 3, April 25, pervasive hackers recently targeted Google's search ads. Some hackers use a small flaw in Google's website to direct customers to websites that automatically download malicious programs through keyword advertisements.
In Google's keyword advertisement, anyone can purchase a specific keyword. If the bid is high, it will be ranked first on the right. In addition, when you place your mouse over the link, the browser's status bar does not display the link URL.
Recently, some hackers have bought keyword advertisements for the "Better Business Bureau" organization. The keywords covered include "BBB" and "BBBonline", and the keywords of "Cars.com.
Roger Thompson, a researcher at the security agency "Exploit Labs", said that once a user clicks a link to these ads, the user will first be transferred to another hacker website before arriving at the correct website, this hacker website will automatically download and install a malicious program with the Microsoft Internet Explorer vulnerability. Since users can finally see the correct website, they do not know that their computer has installed malicious programs.
It is reported that this vulnerability is an old vulnerability. Microsoft released the patch as early as last June, but some computer users did not patch it in time.
Thompson said that some users often view the urls they want to visit through the status bar, which allows them to avoid malicious attacks on websites. However, on the Google website, the status bar does not display the URLs of ad links, this creates an opportunity for hackers.
According to Thompson, Google has already removed the related hacker links.
This is not the first time a well-known website has been used to spread malware. Last summer, nearly 1 million Windows users were placed in a Trojan program, which spread through banners of several high-traffic websites, including MySpace, the largest social networking website in the United States.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.
